Reject certificates that are valid for too long.

net/data/ssl/certificates/40_months_after_2015_04.pem

Index: net/data/ssl/certificates/40_months_after_2015_04.pem
diff --git a/net/data/ssl/certificates/40_months_after_2015_04.pem b/net/data/ssl/certificates/40_months_after_2015_04.pem
new file mode 100644
index 0000000000000000000000000000000000000000..34128a969edad65e54e146694ffefbf352e68684
--- /dev/null
+++ b/net/data/ssl/certificates/40_months_after_2015_04.pem
@@ -0,0 +1,81 @@
+Certificate:
+    Data:
+        Version: 3 (0x2)
+        Serial Number: 6 (0x6)
+    Signature Algorithm: sha256WithRSAEncryption
+        Issuer: CN=Test Root CA
+        Validity
+            Not Before: Apr  2 00:00:00 2015 GMT
+            Not After : Sep  1 00:00:00 2018 GMT
+        Subject: CN=xn--wgv71a119e.com
+        Subject Public Key Info:
+            Public Key Algorithm: rsaEncryption
+                Public-Key: (2048 bit)
+                Modulus:
+                    00:c1:86:e0:72:bf:df:69:da:78:b1:87:99:03:40:
+                    19:d1:8b:a9:a3:80:2e:75:25:27:c7:bc:dd:4b:8c:
+                    8d:11:b1:dd:24:68:12:8d:46:b8:45:19:fc:24:e8:
+                    2a:15:21:84:9d:a2:08:6b:3e:38:34:3f:29:00:5f:
+                    04:68:ed:33:4e:35:41:c3:06:54:f3:41:8b:61:83:
+                    3e:1b:78:59:6b:d2:c3:83:ea:16:99:1f:a7:1c:13:
+                    34:b5:25:c6:01:6d:34:b5:90:0f:7c:70:f0:ab:18:
+                    0c:59:a8:7f:ec:20:21:a7:7e:3b:b9:0c:bb:ef:a9:
+                    ce:1b:75:6d:ac:23:c1:56:c1:28:95:70:85:99:a3:
+                    94:86:ee:c6:45:97:af:29:e1:86:ee:b6:b3:95:97:
+                    4e:38:9a:03:a8:50:a8:21:ae:48:ae:dd:9a:89:0c:
+                    81:c6:98:b1:07:5f:55:44:26:6a:3a:cb:8c:d4:07:
+                    67:71:5d:b1:33:25:2a:ef:f8:af:6b:72:78:f1:9b:
+                    95:c6:3e:0c:57:77:5f:63:1f:99:1d:b0:a3:ac:f6:
+                    7d:65:04:7d:aa:f2:99:b9:6f:e7:75:01:34:ec:c5:
+                    60:b0:c1:bc:c1:f0:d9:10:28:fb:10:ac:ad:3f:ba:
+                    2f:40:96:c7:59:57:d8:f0:f2:c2:3d:96:bf:86:1f:
+                    95:55
+                Exponent: 65537 (0x10001)
+        X509v3 extensions:
+            X509v3 Basic Constraints: critical
+                CA:FALSE
+            X509v3 Subject Key Identifier: 
+                DF:3C:D7:74:E3:7F:2B:EC:C9:44:98:6A:8B:E8:9B:46:23:9B:A4:3C
+            X509v3 Authority Key Identifier: 
+                keyid:98:AF:9A:51:3C:AB:23:88:17:DB:39:AB:FA:17:91:96:8B:83:C5:F1
+
+            X509v3 Extended Key Usage: 
+                TLS Web Server Authentication, TLS Web Client Authentication
+            X509v3 Subject Alternative Name: 
+                IP Address:127.0.0.1
+    Signature Algorithm: sha256WithRSAEncryption
+         45:0b:b9:a7:3d:d4:a7:c9:0e:d8:a1:df:bf:e0:93:26:c1:da:
+         48:ac:70:3b:15:82:30:c9:4d:0f:02:fc:ba:03:24:ab:df:10:
+         47:8e:14:ab:e9:20:95:91:56:41:bd:0c:2e:c9:7c:61:d9:69:
+         6c:9f:fb:25:eb:34:d4:7a:70:9c:36:ba:64:80:8b:4a:c4:8c:
+         23:92:8b:7c:b5:47:e9:f7:37:4c:e0:db:22:ad:67:d0:66:b6:
+         9e:01:9e:9f:6e:63:e1:5d:97:90:3f:e0:5c:4c:d5:f5:23:11:
+         b1:2e:db:c9:79:0f:37:7a:78:67:86:87:14:1b:ab:5b:65:67:
+         61:44:ab:43:c5:6e:19:83:99:64:23:d5:61:bc:4c:36:a2:59:
+         88:4a:69:18:57:33:c5:38:22:4b:33:64:77:43:81:47:55:f2:
+         b2:0f:dc:d3:0e:62:4f:19:6b:6b:89:37:33:3b:6a:d5:15:b6:
+         be:7f:03:ad:88:d2:e2:8e:9e:77:44:39:8e:93:b4:87:87:f6:
+         5a:5a:d1:20:94:cc:de:d9:9d:5c:7f:42:dd:81:ce:fa:77:23:
+         05:11:bd:8c:2e:06:c3:94:65:cf:8f:9b:db:9a:58:d7:e7:36:
+         ff:49:4a:9c:99:c7:3a:9a:d1:32:bb:a4:66:d2:80:7d:80:d7:
+         c9:1d:d7:e7
+-----BEGIN CERTIFICATE-----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+-----END CERTIFICATE-----